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DETAILED ACTION 

1. Applicant's arguments, see Pre-Brief conference, filed 10/16/2007, with respect 
to claims 1-20 have been fully considered and are persuasive. The Final Office action 
of 07/18/2007 has been withdrawn. However, upon further consideration, a new 
ground(s) of rejection is made in view of Deshpande et al. (U.S 20020176579 A1) and 
Barriga-Caceres et al., (US 20030163733). 



Claim Rejections - 35 USC § 103 

2. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented 
and the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
- Patentability shall not be negatived by the manner in which the invention was made. 



This application currently names joint inventors. In considering patentability of the claims under 35 
U.S.C. 103(a), the examiner presumes that the subject matter of the various claims was commonly owned at the time 
any inventions covered therein were made absent any evidence to the contrary. Applicant is advised of the obligation 
under 37 CFR 1 .56 to point out the inventor and invention dates of each claim that was not commonly owned at the 
time a later invention was made in order for the examiner to consider the applicability of 35 U.S.C. 103(c) and 
potential 35 U.S.C. 102(e), (f) or (g) prior art under 35 U.S.C. 103(a). 

The factual inquiries set forth in Graham v. John Deere Co., 383 U.S. 1, 148 USPQ 459 (1966), that are applied for establishing a 
background for determining obviousness under 35 U.S.C. 103(a) are summarized as follows: 

1 . Determining the scope and contents of the prior art. 

2. Ascertaining the differences between the prior art and the claims at issue. 

3. Resolving the level of ordinary skill in the pertinent art. 

4. Considering objective evidence present in the application indicating obviousness or nonobviousness. 



Claims 1-20 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Deshpande et al. (U.S 20020176579 A1), (hereinafter Deshpande) in view of 
Barriga-Caceres et al., (US 20030163733), (hereinafter Barriga). 
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Regarding claims 1,11,12, and 13, Deshpande discloses a network access 
system/program comprising: 

a first network access hub (= hotspot access point 20) communicatively coupled 
to a global communications network (= hotspot provide network 10, see Fig. 1); 

a second network access hub (= hotspot access point 30) communicatively 
coupled to the global communications network (= hotspot provide network 10, 
see Fig. 1); 

an authentication engine (= authentication, billing 50) communicatively coupled to 
the first network access hub (20) and the second network access hub (30), the 
authentication engine operable to receive an initial set of credentials (identification and 
authentication information such as name and password) from a requesting user 
. (= mobile device 40, see Par. [0023]) via the global communications network 
(see Pars. [0025 and 0037]); but fail teach "an authorization engine operable to grant 
access to both transport services and federated data services of federated data 
service providers in response to authorization of the first set of credentials" 

However, Barriga teaches "an authorization engine operable to grant access to 
both transport services and federated data services of federated data service providers 
in response to authorization of the first set of credentials"(see Pars. 0009-10, 0022-25, 
00280047-48 and 0066-70). 

It would therefore have been obvious to one of the ordinary skill in the art to 
combine the teaching of Barriga with the system of Deshpande for the benefit of 
achieving a federated single sign-on network (see Barriga, Par. 0025). 
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Regarding claim 2, as recited in claim 1 , Deshpande further discloses that the system 
further comprising a short-range wireless transceiver associated with the first network 
access hub (see Pars. [0002 and 0020]). 

Regarding claim 3, as recited in claim 2, Deshpande further discloses the system, 
wherein the transport services comprise wireless communication via a wireless local 
area network technology link (see Par. [0021]). 

Regarding claim 4, as recited in claim 3, Deshpande further discloses the system, 
wherein the data services comprise a service that provides personalized information 
based on an identity of the requesting user (see Par. [0025]). 

Regarding claim 5, as recited in claim 4, Barriga discloses the system, wherein, a first 
data service is provided by a first service provider, the data services further comprising 
another data service provided by a different service provider (see Pars. 0009-10, 0022- 
25, 00280047-48 and 0066-70). 

It would therefore have been obvious to one of the ordinary skill in the art to 
combine the teaching of Barriga with the system of Deshpande for the benefit of 
achieving a federated single sign-on network (see Barriga, Par. 0025). 

Regarding claim 6, as recited in claim 5, Barriga discloses that the system, further 
comprising a federation engine operable to maintain information that indicates members 
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of a service provider federation, the service provider federation comprising the first 
service provider and the different service provider (see Pars. 0009-10, 0022-25, 
00280047-48 and 0066-70). 

It would therefore have been obvious to one of the ordinary skill in the art to 
combine the teaching of Barriga with the system of Deshpande for the benefit of 
achieving a federated single sign-on network (see Barriga, Par. 0025). 

Regarding claim 7, Deshpande discloses a network access method comprising: 
receiving a first set of credentials; but fails to teach "authorizing access to a network 
data service and a network transport service in response to authenticating the 
first set of credentials; wherein said network data service is provided by a 
federated web-based data service provider " , 

However, Barriga teaches "authorizing access to a network data service and a 
network transport service in response to authenticating the first set of credentials; 
wherein said network data service is provided by a federated web-based data service 
provider "(see Pars. 0009-10, 0022-25, 00280047-48 and 0066-70). 

It would therefore have been obvious to one of the ordinary skill in the art to 
combine the teaching of Barriga with the system of Deshpande for the benefit of 
achieving a federated single sign-on network (see Barriga, Par. 0025). 

Regarding claim 8, as recited in claim 7, Deshpande discloses that the method further 
comprising: receiving a request for access from an electronic device (see Par. [0020]); 
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prompting the electronic device to send the first set of credentials (= PIN, password); 
authenticating the first set of credentials; and communicating an authentication token to 
the electronic device (see Pars. [0020 and 0025]. 

Regarding claim 9, as recited in claim 8, Deshpande discloses that the method further 
comprising: requesting that the electronic device cache the authentication token 
(see Par. [0020]); receiving a subsequent request for access from the electronic device 
(see Par. [0020]); but fails to teach "recognizing an existence of the authentication 
token at the electronic device; authorizing access in response to the subsequent 
request without further authentication". 

However, Barriga teaches "recognizing an existence of the authentication token 
at the electronic device; authorizing access in response to the subsequent request 
without further authentication"^ single sign-on, see Pars. 0009-10, 0022-25, 00280047- 
48 and 0066-70). 

It would therefore have been obvious to one of the ordinary skill in the art to 
combine the teaching of Barriga with the system of Deshpande for the benefit of 
achieving a federated single sign-on network (see Barriga, Par. 0025). 

Regarding claim 10, as recited in claim 7, Deshpande discloses that the method further 
comprising; 

receiving a request from an electronic device seeking access to a first data 
service via a first transport service (see Par. [0020]); 
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prompting the electronic device to send the first set of credentials authenticating 
the first set of credentials (see Par. [0037]); 

receiving a request from a second electronic device seeking access to a second 
data service via a second transport service (see Pars. [0021 and 0030]); prompting the 
second electronic device to send a set of credentials; and authenticating the set of 
credentials (see Par. [0037]). 

Regarding claim 14, as recited in claim 13, Deshpande discloses that the system 
further comprising the electronic device having a cache operable to store the 
authentication token (see Pars. [0024 and 0037]. 

Regarding claim 15, as recited in claim 13, Deshpande discloses the system, wherein 
authentication token is a valid indicator of access rights to both transport services and 
data services at a second one of the plurality of hotspots (see Pars. [0037 and 042-43]). 

Regarding claim 16, as recited in claim 13, Deshpande discloses that the system, 
further comprising: 

an authentication engine communicatively coupled to the broad. communications 
network and operable to receive an initial set of credentials from a requesting user and 
to compare the initial set of credentials against a maintained set of credentials 
(see Par. [0037]); but fails to teach "a valid signal indicating that the requesting 
user is a valid user; and a federation engine operable to initiate a sharing of 
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information associated with the valid user with a first federated data service 
provider" 

However, Barriga teaches "a valid signal indicating that the requesting user is a 
valid user; and a federation engine operable to initiate a sharing of information 
associated with the valid user with a first federated data service provider" (see Pars. 
0009-10, 0022-25, 00280047-48 and 0066-70). 

It would therefore have been obvious to one of the ordinary skill in the art to 
combine the teaching of Barriga with the system of Deshpande for the benefit of 
achieving a federated single sign-on network (see Barriga, Par. 0025). 

Regarding claim 17, as recited in claim 13, Deshpande discloses that the system, 
further comprising: 

an authentication engine communicatively coupled to the broad communications 
network and operable to output a valid signal indicating that a user requesting access is 
a valid user and entitled to transport and data service access (see Par. [0037]); but fails 
to teach "a federation engine operable to initiate a sharing of at least a portion of a 
valid user information file with a first federated data service provider; and the 
valid user information operable to facilitate access to a federated data service 
without additional sign on operations by the user requesting access". 

However, Barriga teaches "a federation engine operable to initiate a sharing of 
at least a portion of a valid user information file with a first federated data service 
provider; and the valid user information operable to facilitate access to a federated data 
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service without additional sign on operations by the user requesting access" (see Pars. 
0009-10, 0022-25, 00280047-48 and 0066-70). 

It would therefore have been obvious to one of the ordinary skill in the art to 
combine the teaching of Barriga with the system of Deshpande for the benefit of 
achieving a federated single sign-on network (see Barriga, Par. 0025). 

Regarding claim 18, as recited in claim 13, Deshpande discloses the system, wherein 
the data service comprises a unified messaging mailbox (see Pars. [0019 and 0041]). 

Regarding claim 19, as recited in claim 13, Deshpande discloses the system, wherein 
the transport service comprises access to the broad communication network via the at 
least one of the plurality of hotspots (see Par. [0019] and Fig. 2). 

Regarding claim 20, as recited in claim 19, Deshpande discloses that the system, 
further comprising: 

an authentication engine communicatively coupled to the broad communications 
network and operable to output a valid signal indicating that a user requesting access is 
a valid user and entitled to transport and data service access (0037); but fails to teach 
"a federation engine operable to initiate a sharing of at least a portion of a valid 
user information file with a first federated data service provider ; and the valid 
user information operable to facilitate access to a federated data service without 
additional sign on operations by the user requesting access". 
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However, Barriga teaches "a federation engine operable to initiate a sharing of 
at least a portion of a valid user information file with a first federated data service 
provider ; and the valid user information operable to facilitate access to a federated data 
service without additional sign on operations by the user requesting access" (= single 
sign-on and federation, see Pars. 0009-10, 0022-25, 00280047-48 and 0066-70). 

It would therefore have been obvious to one of the ordinary skill in the art to 
combine the teaching of Barriga with the system of Deshpande for the benefit of 
achieving a federated single sign-on network (see Barriga, Par. 0025). 



Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Kwasi Karikari whose telephone number is 
571-272-8566. The examiner can normally be reached on M-F (8 am - 4pm). 
If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Rafael Perez-Gutierrez can be reached on 571-272-7915. The fax phone 
number for the organization where this application or proceeding is assigned is 571- 
273-8566. Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). 



Conclusion 




Kwasi Karikari^ 
Patent Examiner 
02/19/2008 
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